SERVAS! Secure Enclaves via RISC-V Authenticryption Shield

Isolation is a long-standing security challenge. Privilege rings and virtual memory are increasingly augmented with capabilities, protection keys, powerful enclaves. Moreover, we facing an increased need for physical protection, e.g., via transparent encryption, resulting in complex interplay of various mechanisms. In this work, tackle the isolation challenge new extensible primitive called authenticryption shield that unifies policies. By using authenticated streamline reasoning towards cryptographic guarantees. We showcase versatility our approach by designing prototyping SERVAS – novel enclave architecture RISC-V. facilitates efficient secure sharing mechanism. While encryption constitutes main overhead, invoking requires only 3.5x simple syscall instead 71x Intel SGX.